Critical · published January 15, 2021
CVSS calls it critical at 10.0. It sits in the 99.0th percentile for exploit probability.
🚨 No password needed, just an untrusted request! OneDev before version 4.0.3 has a Kubernetes REST endpoint that lets attackers send data without any authentication—think of it like letting anyone walk into a secure vault just by waving a piece of paper. 🔥 This is like a restaurant where the chef blindly follows orders from anyone without verifying the customer’s identity, potentially serving up a dish that could cause chaos in the kitchen! An attacker could execute arbitrary code before even logging in, allowing them to take complete control of the OneDev instance. This is absolutely devastating, as they could manipulate data, disrupt services, or even pivot further into your infrastructure!
This is like a restaurant where the chef blindly follows orders from anyone without verifying the customer’s identity, potentially serving up a dish that could cause chaos in the kitchen! This vulnerability allows pre-authentication remote code execution (RCE) through deserialization of untrusted data received by exposed Kubernetes REST endpoints that lack proper authentication and authorization checks.
An attacker could execute arbitrary code before even logging in, allowing them to take complete control of the OneDev instance. This is absolutely devastating, as they could manipulate data, disrupt services, or even pivot further into your infrastructure! Immediately upgrade OneDev to version 4.0.3 or later to mitigate this vulnerability. Review your deployment settings to ensure that unauthorized access is not possible, and consider implementing additional security measures like API gateways. 🔒 You've got this! By patching and reviewing your security settings, you're on your way to making the internet a safer place. 🛡️